CVSS 8.1 · High EPSS 1,5%
Kerentanan Improper Restriction of XML External Entity Reference pada ibm qradar security information and event manager. Skor CVSS 3.1 8.1 (High) menurut NVD.
IBM QRadar SIEM 7.3 and 7.4 may vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 193245.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| ibm | qradar security information and event manager | Versi 7.3.0 hingga sebelum 7.3.3 |
| ibm | qradar security information and event manager | Versi 7.4.0 hingga sebelum 7.4.2 |
| ibm | qradar security information and event manager | Versi 7.3.3 |
| ibm | qradar security information and event manager | Versi 7.3.3 fix_pack_1 |
| ibm | qradar security information and event manager | Versi 7.3.3 fix_pack_2 |
| ibm | qradar security information and event manager | Versi 7.3.3 fix_pack_3 |
| ibm | qradar security information and event manager | Versi 7.3.3 fix_pack_4 |
| ibm | qradar security information and event manager | Versi 7.3.3 fix_pack_5 |
| ibm | qradar security information and event manager | Versi 7.3.3 fix_pack_6 |
| ibm | qradar security information and event manager | Versi 7.3.3 fix_pack_7 |
| ibm | qradar security information and event manager | Versi 7.4.2 |
| ibm | qradar security information and event manager | Versi 7.4.2 fix_pack_1 |
| ibm | qradar security information and event manager | Versi 7.4.2 fix_pack_2 |